Oversee Cybersecurity and Risk function across Baker Hughes business sites and interests
Keep up to date with changing European and regional regulations impacting IT operations
Monitor regulatory developments, assess impact, and ensure proactive compliance
Work closely with IT security to ensure compliance with regional cybersecurity regulations (e.g., NIS Directive, EU Cybersecurity Act)
Conduct regular IT compliance audits, reviews, and assessments
Coordinate and manage third-party audits and inspections and ensure External Audit activity is properly scoped
Partner with IT and the business to improve controls or automate compliance activities
Maintain ongoing communication with business and auditors on audit planning, walkthroughs/testing, audit requests, impact assessments, and deficiency evaluation of IT controls
Requirements
Minimum bachelor degree from an accredited university or college
Minimum 9 years of relevant working experience
Experience in ITGC/GITC audits including interfaces, control reports configurable controls
Deep working knowledge of IT service management (e.g., ITIL-related disciplines)
Solid working knowledge of OT security and how it aligns and differs from Enterprise IT Security
Understanding of industry security standards and regulatory/compliance requirements (ISO 27001, NIST 800-53, IEC/ISA 62443, SOC2, PCI, SOX)
Knowledge of Regulatory Compliance requirements within the EU and targeted global countries (GDPR, NIS, Digital markets and services, European Cybersecurity act)
Experience conducting IT compliance audits, reviews, and assessments
Experience coordinating and managing third-party audits and inspections
Strong stakeholder management and collaboration skills
Ability to make difficult decisions and weigh costs and benefits